07/10/2026
New paper accepted at CSF 2027
New paper accepted at CSF 2027
Our paper "Approximating Quantitative Information Flow Symbolically with Gaussian-Mixture Semantics", joint work with Raúl Pardo and Andrzej Wąsowski from ITU Copenhagen, was accepted at CSF 2027!
A fundamental challenge in privacy analysis is measuring how much an attacker can infer about a secret from a program's public output: a location, an income, or a medical result. Existing approaches either rely on statistical sampling, which can underestimate leakage, or restrict themselves to discrete domains, where proximity between values is lost.
We propose a static analysis method that quantifies this information leakage symbolically, using a Gaussian Mixture approximation semantics for probabilistic programs. Our method computes exact analytical results or provably sound upper and lower bounds on the Gaussian semantics not only for entropy-based measures but also for g-vulnerability, and not only on discrete but also on continuous domains. Our evaluation on differential privacy and geo-localization shows that our bounds are precise and consistent with numerical estimates.
I think this is a promising step in the continuous landscape for privacy leakage, and it is exciting to see that probabilistic programming can be successfully applied to this domain!
📖 Pre-print soon available